Towards a Distributed Inference Detection System in a Multi-Database Context

Abstract

The omnipresence of services offered by diverse applications leads customers to share more and more personal data, among which some are sensitive. Dishonest entities perform inference attacks by querying non-sensitive data in order to deduce the stored sensitive data. Detecting those attacks is still an open problem in a setting where a dishonest entity has access to distinct data controllers' databases containing data collected from the same customer. This problem has been addressed considering a centralized detection system. However, this approach is limited because of this centralized nature where the system protects the customers' privacy at the expense of the data controllers' privacy. Hence, we propose in this article the description of a distributed architecture to detect inference attacks in a multi-database context, while preserving the privacy of both the applications and the customers.